2 Features and benefits Seamless integration behind virtually any firewall enables easy deployment. Mobile device support delivers ActiveSync-based, as well as clientless, network-level remote access for Apple ios, and Google Android. SonicWALL Mobile Connect, a single unified client app for ios and Android, provides smartphone and tablet users superior network-level access to corporate and academic resources over encrypted SSL VPN connections. NetExtender technology enables network-level access to resources, services and applications from a variety of platforms including Windows, Google Android, Mac OS and Linux. Granular unified policy displays bookmarks and policies in one centralized page, easing administration. Multiple and custom LDAP policies can restrict unauthorized access to specific applications or resources. Two-factor authentication provides tokenless, enhanced protection against key loggers by generating a unique one-time password that is sent to a remote user s mobile device or address. High availability allows administrators to deploy an active-backup pair of SRA 4600 appliances to enhance uptime while reliably providing security for remote access users. Web Application Firewall Service* blocks cross-site scripting, injection attacks and cookie tampering (in compliance with OWASP Top 10 and PCI DSS), prevents credit card and Social Security number theft, and allows automatic Application Profiling for multiple WAF-enabled portals. End Point Control (EPC) for the SRA Series allows for the unique identification of Windows-based endpoints to tie them to the authorized user as well as the ability to assess the security posture of the device by looking for security components such as anti-virus and anti-spyware software. Easy, cost-effective deployment into virtually any network with no preinstalled clients, the SRA for SMB Series eliminates the cost and complexity of deploying and maintaining traditional IPSec VPNs. Remote support using Dell SonicWALL Secure Virtual Assist* enables technicians to provide secure on-demand assistance to customers on Windows, Macintosh or Linux systems. Secure Virtual Access* provides secure remote control of unattended Windows systems. Secure virtual meeting** instantly brings meeting participants together in a secure and cost-effective fashion. Clean VPN secures the integrity of VPN access, decrypts and removes threats from traffic tunneled over SSL VPN before they enter the network through a combined deployment of a Dell SonicWALL SRA Series appliance with a Dell SonicWALL Next-Generation Firewall. Spike licenses* can increase licensed remote user count instantly for seamless continuity during disruptions or emergencies. Load balancing can be deployed to partition requests across multiple web servers. *Additional license required; available as a software add-on module **Available in conjunction with Secure Virtual Assist for and SRA Virtual Appliances only 2

3 Dell SonicWALL SRA Series for SMB anytime, anywhere access to resources Granular access to authorized users The SRA Series for SMB extends secure remote access beyond managed employees to unmanaged remote employees, partners, and customers without compromising security, by employing fine-grained access controls. Employee on corporate laptop in hotel Tightly controlled and managed by IT department Corporate LAN Employee on home computer Dell SonicWALL SRA at corporate network Employee on smartphone/ tablet Employee at kiosk Authorized partner Authorized customer Not controlled and managed by IT department Awards Certifications Files and applications Intranet User desktop Other servers and applicatons Citrix PresentationServers (ICA) and Microsoft Terminal Servers Other desktops Broad access to resources The SRA Series for SMB can be used to provide Windows, Mac OS, ios, Linux, and Android users with access to a broad range of resources Mobile Connect, a single unified client app for ios and Android, provides smartphone and tablet users superior network-level access to corporate and academic resources over encrypted SSL VPN connections NetExtender enables network-level access to resources, services and applications such as Microsoft Outlook, as well as automatic Client DNS registration The Virtual Office portal enables web-based access to intranet (HTTP, HTTPS), file (FTP, CIFS), desktop (Citrix, Terminal Server, VNC), and terminal (Telnet, SSH) resources If an application supports URL rewriting, it can be accessed by bookmarks; otherwise, by Application Offloading Simple to manage SRA Series solutions feature Unified Policy and an intuitive web-based management interface that offers context-sensitive help to enhance usability. In addition, multiple products can be centrally managed using the Dell SonicWALL Global Management System (GMS 4.0+). Resource access via the products can be effortlessly monitored using the Dell SonicWALL Analyzer reporting tool. 3

4 Dell SonicWALL secure remote access solutions Secure remote PC control, support and collaboration In organizations with distributed or branch locations, an administrator, technician, or authorized employee may require full control of specific PCs within the LAN from remote locations. Dell SonicWALL Secure Virtual Assist licensed with Secure Virtual Access, enhances productivity by enabling secure remote support of Windows, Mac and Linux systems as well as secure remote control of unattended Windows-based computers. In addition, organizations would like to have a means to conduct cost-effective and secure virtual meetings. Unlike other virtual meeting solutions, Dell SonicWALL Secure Virtual Meeting incorporates all of the security of the SRA for SMB Series to comprehensively protect sensitive and proprietary communications. Enhanced solution with Clean VPN Dell SonicWALL SRA Series for SMB appliances integrate seamlessly into almost any network topology and can be easily deployed alongside virtually any third-party firewall. Deployment with a Dell SonicWALL Next-Generation Firewall running Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service along with application intelligence, control and Visualization further enhances protection benefits. Deploying NetExtender in conjunction with Enforced Client Anti-Virus and Anti-Spyware on managed PCs enforces endpoint security. Secure Virtual Assist also offers seamless integration by leveraging the appliance s local and external authentication facilities. Furthermore, Web Application Firewall Service applies reverse proxy analysis of Layer 7 traffic against known signatures, denies access upon detecting web application vulnerabilities such as SQL Injection attacks, and redirects users to an explanatory error page. 4

5 Dell SonicWALL secure remote access solutions Secure remote access solution With the mobile workforce increasing and greater threats of unexpected disruptions, remote access has become a business necessity. An SRA appliance deployed in one-arm mode alongside a Dell SonicWALL Next-Generation Firewall (or virtually any other third-party firewall) enables remote users to access corporate network resources securely from anywhere outside the LAN. 3 Personalized web portal Dell SonicWALL SRA Appliance 3 Files and applications Corporate LAN User Intranet desktop 1 Decrypted traffic 2 Remote user Encrypted SSL traffic Dell SonicWALL NSA or TZ firewall 4 Unified threat management Scanning Other servers and applications Citrix XenApp and Microsoft terminal servers Other desktops RSA, VASCO, active directory, RADIUS, LDAP or local database 1 Incoming HTTPS traffic is seamlessly forwarded by the Dell SonicWALL NSA or TZ Series firewall to the Dell SonicWALL SRA appliance, which decrypts and authenticates network traffic. 2 Users are authenticated using the onboard database or through third-party authentication methods such as RSA, VASCO, RADIUS, LDAP, Microsoft Active Directory or Windows NT Domain. 3 A personalized web portal provides access to only those resources that the user is authorized to view based on company policies. 4 To create a Clean VPN environment, traffic is passed through to the NSA or TZ Series firewall (running Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, and Application Intelligence and Control), where it is fully inspected for viruses, worms, Trojans, spyware and other sophisticated threats. End point control Dell SonicWALL End Point Control (EPC) for the SRA Series, delivers enterpriseclass device identification and enforces granular security posture requirements on Windows-based devices. EPC for the SRA Series allows for the unique identification of Windows-based endpoints as well as the ability to assess the security posture of the device by looking for security components such as anti-virus and anti-spyware software. This helps to establish device trust and reduce the chances of malware entering the network through non-it-managed devices. 5

6 Dell SonicWALL secure remote access solutions Web Application Firewall and pci compliance The Dell SonicWALL Web Application Firewall Service offers businesses a complete, affordable, well integrated compliance solution for web-based applications that is easy to manage and deploy. It supports OWASP Top Ten and PCI DSS compliance, providing protection against injection and cross-site scripting attacks (XSS), credit card and Social Security number theft, cookie tampering and crosssite request forgery (CSRF). Dynamic signature updates and custom rules protect against known and unknown vulnerabilities. Web Application Firewall can detect sophisticated web-based attacks and protect web applications (including SSL VPN portals), deny access upon detecting web application malware, and redirect users to an explanatory error page. It provides an easy-to-deploy offering with advanced statistics and reporting options for meeting compliance mandates. Application profiling enables virtual patching of vulnerabilities. Clean Wireless remote access solution More corporations, universities, hospitals and governmental organizations are implementing wireless networks and using SSL VPN as a secure and centralized access control solution. Dell SonicWALL SSL VPNs integrate seamlessly with Dell SonicWALL wireless access solutions. When deployed alongside a Dell SonicWALL Next-Generation Firewall (running Gateway Anti-Virus, Anti- Spyware, Intrusion Prevention, and Application Intelligence and Control) and Dell SonicWALL SonicPoints, a Dell SonicWALL SSL VPN solution ensures that users get access from anywhere on campus, and that the wireless connections are encrypted via the SSL protocol. As an added bonus, remote workers away from campus can connect into the corporate network via an SSL VPN connection. IT maintains centralized, granular access control over who can access what resources using a single gateway. Wireless authentication The Dell SonicWALL SRA Series appliance can be configured to authenticate WLAN users, granting them access to internal resources while keeping the session secure. The benefit to this method of acccess is clientless access from the WLAN. Wireless user Step 1: Wireless user obtains DHCP lease on the WLAN network. WLAN Dell SonicPoint-N Firewall Step 2: When browser is opened, the user is redirected to the appliance and prompted for authentication. DMZ/SSL VPN Dell SonicWALL SRA appliance LAN Encrypted traffic Workstations AD server Step 3: Once authenticated, the user can open a NetExtender session which will create a tunnel all route from the client s system to the appliance. The user will be given a NetExtender client subnet and can now access internal and external resources. 6

Secure Remote Access Series for SMB Comprehensive and easy-to-use clientless secure remote access Today s small- to mid-sized businesses (SMBs) depend on a mobile workforce. The Consumerization of IT is

Secure Remote Access Series Enable mobile and remote worker productivity while protecting from threats The proliferation of mobile devices in the workplace has increased the demand for secure access to

SSL-VPN Combined With Network Security Introducing A popular feature of the SonicWALL Aventail SSL VPN appliances is called End Point Control (EPC). This allows the administrator to define specific criteria

Secure Virtual Assist/ Access/Meeting Easy-to-use tools for secure remote support, PC control and collaboration Technical support by phone, email, chat and pre-installed remote support clients can be cumbersome,

Dell SonicWALL SRA 7.5 Citrix Access Document Scope This document describes how to configure and use Citrix bookmarks to access Citrix through Dell SonicWALL SRA 7.5. It also includes information about

Proof of Concept Guide Version 4.0 Published: OCT-2013 Updated: 2005-2013 Propalms Ltd. All rights reserved. The information contained in this document represents the current view of Propalms Ltd. on the

Citrix Access on SonicWALL SSL VPN Document Scope This document describes how to configure and use Citrix bookmarks to access Citrix through SonicWALL SSL VPN 5.0. It also includes information about configuring

SA Series SSL VPN Virtual Appliances Data Sheet Published Date July 2015 Product Overview The world s mobile worker population passed the 1 billion mark in 2010 and will grow to more than 1.3 billion by

Providing Secure IT Management & Partnering Solution for Bendigo South East College Why did Bendigo South East College engage alltasksit & DELL? BSEC is in the midst of school population growth in 2015,

Network protection and UTM Buyers Guide Using a UTM solution for your network protection used to be a compromise while you gained in resource savings and ease of use, there was a payoff in terms of protection

Remote Support For Any Environment NetSupport Manager v11 NetSupport Manager has been helping organizations optimize the delivery of their IT support services since 1989 and while the use of Remote Control

A Guide to New Features in Propalms OneGate 4.0 Propalms Ltd. Published April 2013 Overview This document covers the new features, enhancements and changes introduced in Propalms OneGate 4.0 Server (previously

Securing the Small Business Network Keeping up with the changing threat landscape Table of Contents Securing the Small Business Network 1 UTM: Keeping up with the Changing 2 Threat Landscape RFDPI: Not

Data Sheet Cisco ASA 5500 Series VPN Edition The Cisco ASA 5500 Series Adaptive Security Appliance is a purpose-built platform that combines best-in-class security and VPN services for small and medium-sized

Next Gen Firewall and UTM Buyers Guide Implementing and managing a network protected by point solutions is far from simple. But complete protection doesn t have to be complicated. This buyers guide explains

Chapter 6 Configuring the SSL VPN Tunnel Client and Port Forwarding This chapter describes the configuration for the SSL VPN Tunnel Client and for Port Forwarding. When a remote user accesses the SSL VPN

Securing Citrix with SSL VPN Technology An AEP Networks Solution Summary For years, Citrix Systems has dominated the server-based computing market as the solution of choice for application access across

Best Practices for Secure Mobile Access A guide to the future. Abstract Today, more people are working from more locations using more devices than ever before. Organizations are eager to reap the benefits

Collax SSL VPN Howto This howto describes the easy configuration of a Collax server as SSL VPN gateway in order to enable external access to selected applications in the company network. Except for a common

Secure Mobile Access From everywhere... From any device... From user......to applications Page 3...without compromising on security and usability... and to my PC in the office: Secure Virtual Access Contrary

5500 Series SSL/IPsec VPN Edition The Cisco ASA 5500 Series Adaptive Security Appliance is a purpose-built platform that combines best-in-class security and VPN services for small and medium-sized business

is currently used by many large organizations including banks, health care organizations, educational institutions and government agencies. Thousands of organizations rely on File- Cloud for their file

> White Paper ProxySG for Reverse Proxy Web-based solutions are being implemented for nearly every aspect of business operations, and increasingly for trusted environments with mission-critical business

Kaseya Kaseya IT Automation Framework An Integrated solution designed for reducing complexity while increasing productivity for IT Professionals and Managed Service Providers. The powerful, web-based automation